Should (p - q) be disallowed in @safe code?

[Walter Bright]

I'm just going to make p-q an error in @safe code. If someone still wants to do 
it, they can cast the pointers to size_t, or make it @trusted/@system code.